Privacy Policy

1. Information We Collect

When you create an account, we collect your email address, pen name, and optionally your real name (used for payment verification). We also collect payment information through Stripe, our third-party payment processor — we do not store your card details.

2. How We Use Your Information

We use your information to provide the PopLit service, process payments, display your stories and profile to other users, and communicate service updates. We do not sell your data to third parties.

3. Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS). We use industry-standard encryption for data in transit and at rest. Authentication is handled via secure, httpOnly cookies.

4. Your Rights (GDPR)

You have the right to access, export, and delete your personal data at any time. You can export all of your data from the Settings page. Account deletion anonymizes your data while preserving story content attributed to "Deleted User."

5. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

6. Third-Party Services

We use the following third-party services: Stripe (payments), Supabase (database and authentication), Vercel (hosting), and Google (OAuth sign-in).

7. Contact

For privacy-related inquiries, contact us at privacy@poplit.io.